CVE-2015-1420 - CERT CVE
ID CVE-2015-1420
Sažetak Race condition in the handle_to_path function in fs/fhandle.c in the Linux kernel through 3.19.1 allows local users to bypass intended size restrictions and trigger read operations on additional memory locations by changing the handle_bytes value of a file handle during the execution of this function.
Reference
CVSS
Base: 1.9
Impact: 2.9
Exploitability:3.4
Pristup
VektorSloženostAutentikacija
LOCAL MEDIUM NONE
Impact
PovjerljivostCjelovitostDostupnost
PARTIAL NONE NONE
CVSS vektor AV:L/AC:M/Au:N/C:P/I:N/A:N
Zadnje važnije ažuriranje 28-12-2016 - 02:59
Objavljeno 16-03-2015 - 10:59